CVE-2011-0551
Description
Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Risk Information
Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.264
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Symantec Endpoint Protection (x64) 11.0.6000 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6100 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6200 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6200.754 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6300 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6000 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6100 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6200 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6200.754 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6300 to latest version | Windows |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234